# Ketju research: B² Buzz

- URL: https://riadefi.com/rejections/b2-buzz/
- Verdict: rejected
- Type: Other
- Reviewed: 2026-08-18
- Last confirmed: 2026-08-18

## Research summary

This review reaches an adverse research assessment on the clearest grounds of any Bitcoin-bridge entity in this backlog: no disclosed custody, no working exit, and a recent parent-organization exploit with an insider-access red flag. B² Buzz is a staking and points event on B² Network (BSquared), the Bitcoin Layer 2 that UniRouter, already rejected in this registry, is built on top of. B²'s own bridge documentation names no custody architecture and states plainly that "the withdraw function is not yet available." The bridge is deposit-only, with no disclosed path back to native BTC at all. In July 2026, weeks before this review, B² Network was exploited for about $3.86M when an attacker used privileged upgrade authority over a token staking contract. The wallet that executed the drain had held that authority since 2025, with access revoked only after the theft, a pattern independent analysts read as a credible insider-access concern the team has not refuted.

## Observable review triggers

- A withdrawal or redemption function is implemented, documented, and demonstrated to work at proposed size
- Custody architecture and named signing parties are publicly disclosed
- An independent post-mortem of the July 2026 exploit is published, confirming whether the privileged access was insider-originated, with remediation verified
- Twelve consecutive months with no further token-contract or bridge-contract privileged-access incident, counted from the July 2026 exploit

---

Published by Ketju Research (https://ketjuresearch.com). Educational analysis only; not legal, tax, compliance, or investment advice.
Machine-readable index: https://riadefi.com/llms.txt · Content API: https://riadefi.com/content.json